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METHODS FOR CHARACTERIZING, GENERATING TEST 
SEQUENCES FOR, AND/OR SIMULATING INTEGRATED 
CIRCUIT FAULTS USING FAULT TUPLES AND RELATED 
SYSTEMS AND COMPUTER PROGRAM PRODUCTS 

BACKGROUND OF THE INVENTION 

The present invention relates to the field of integrated circuits, and more 
particularly to the fields of integrated circuit testing, fault generation, and/or test 
pattern generation. 

5 Fault modeling techniques are discussed, for example, in U.S .Patent No. 

5,546,408 to Keller entitled "Hierarchical Pattern Faults For Describing Logic Circuit 
Failure Mechanisms", the disclosure of which is incorporated herein in its entirety by 
reference. In automatic test generation programs, some type of defect model is 
generally used to identify test stimulus patterns for detecting the modeled defects. 

10 The defect model is also used to ascertain the effectiveness of the generated test 
stimulus patterns in detecting the defects. 

Traditionally a "stuck-at M fault model has been used in the test industry. That 
is, a defect is modeled as a node or pin that is shorted to (stuck-at) another node or 
pin, such as a logic one level or a logic zero level. More recently, a transition fault 

1 5 model has been used to model dynamic defects that require a sequence of two test 
stimulus patterns to excite the defect. 

As discussed in the Keller '408 patent, a "pattern fault" is defined as a static 
pattern fault or as a dynamic pattern fault. A static pattern fault is represented as a list 
of required excitation nodes and their values, as well as a fault propagation point. The 

20 fault propagation point is defined to be a net or node in a circuit to be tested where the 
defect's effect first appears once it has been excited. A dynamic pattern fault adds to 
this structure an initial value list of nodes and their required initial values. The 
dynamic pattern fault may be employed when a two pattern sequence is required to 
excite a specific defect. 

25 
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SUMMARY OF THE INVENTION 

Integrated circuit faults can be characterized according to embodiments of the 
present invention using fault tuples. An integrated circuit device, for example, may 
include primary inputs, primary outputs, and a plurality of signal lines and circuits 
5 interconnecting the primary inputs and outputs. A fault tuple, according to 

embodiments of the present invention, can be defined to include an identification of a 
signal line, a signal line value, and a clock cycle constraint for the signal line. The 
fault tuple is satisfied by providing a test sequence comprising one or more test 
patterns such that the signal line is controlled to the signal line value during a clock 

1 0 cycle of the test sequence defined by the clock cycle constraint responsive to 
application of the test sequence to the primary inputs. 

Fault tuples, products of fault tuples, and/or macrofaults of OR-ed products of 
fault tuples can be used to generated test patterns for integrated circuit devices. For 
example, at least one fault tuple can be provided including an identification of a signal 

1 5 line, a signal line value, and a clock cycle constraint for the signal line. A test 
sequence comprising at least one test pattern can be determined such that the test 
sequence can be applied to the primary inputs of the integrated circuit device to 
control the signal line to the signal line value during a clock cycle of the test sequence 
defined by the clock cycle constraint. 

20 Fault tuples, products of fault tuples, and/or macrofaults of OR-ed products of 

fault tuples can also be used to simulate test patterns for faults of an integrated circuit 
device. For example, a fault tuple can be provided including an identification of a 
signal line, a signal line value, and a clock cycle constraint for the signal line. A test 
sequence comprising one or more test patterns can also be provided. Simulation 

25 according to embodiments of the present invention can determine if the fault tuple 
will be satisfied by the test pattern such that the signal line is controlled to the signal 
line value during a clock cycle of the test sequence defined by the clock cycle 
constraint responsive to application of the test sequence to the primary inputs. 
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BRIEF DESCRIPTION OF THE DRAWINGS 

Figure 1 is a block diagram of a fault simulator according to embodiments of 
the present invention. 

5 Figures 2a-2f are schematic diagrams illustrating fault types described using 

fault tuples according to embodiments of the present invention. 

Figure 3a is a block diagram of a Huffman sequential circuit model. 
Figure 3b is a timing diagram illustrating test pattern application times and 
output response observation time windows for a Huffman sequential circuit model. 
10 Figure 4 is a schematic diagram illustrating a circuit and a test input pattern. 

Figures 5-7 are flow charts illustrating operations of test generation and 
simulation according to embodiments of the present invention. 

DETAILED DESCRIPTION OF THE INVENTION 

1 5 The present invention will now be described more fully hereinafter with 

reference to the accompanying drawings, in which preferred embodiments of the 
invention are shown. This invention may, however, be embodied in many different 
forms and should not be construed as limited to the embodiments set forth herein; 
rather, these embodiments are provided so that this disclosure will be thorough and 

20 complete, and will fully convey the scope of the invention to those skilled in the art. 
Like numbers refer to like elements throughout. It will be understood that when an 
element is referred to as being "connected" or "coupled" to another element, it can be 
directly connected or coupled to the other element or intervening elements may be 
present. In contrast, when an element is referred to as being "directly connected" or 

25 "directly coupled" to another element, there are no intervening elements present. 

A fault representation mechanism for digital circuits according to the present 
invention is based on fault tuples. A fault tuple is a 3-element set including a signal 
line, a value, and a clock cycle constraint. AND-OR expressions of fault tuples are 
used to represent arbitrary misbehaviors. A fault simulator based on fault tuples has 

30 been used to conduct experiments on benchmark circuits, and simulation results show 
that a 17% reduction of average CPU time can be achieved when performing 
simulation on all fault types simultaneously, as opposed to individually. Further 
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improvements in speedup may be obtained when the shared characteristics of the 
various fault types are better exploited. 

The classical single stuck-line (SSL) fault model is the most commonly used 
fault model in digital systems testing. The SSL fault model assumes that any single 
5 circuit line is susceptible to a permanent stuck-at logic value of 0 or 1 . Among the 
many reasons for its continued appeal are: (a) the number of SSL faults is linearly 
related to the number of lines in the circuit, (b) the model maps well to the gate level, 
(c) the SSL tests have traditionally done a good job of detecting non-SSL 
misbehavior, and (d) there exist many commercial test generation and fault simulation 
1 0 tools based on single stuck-line misbehavior. 

However, real defects may not behave like SSL faults, thus making tasks 
— like defect diagnosis difficult, and SSL tests alone may not be sufficient for obtaining 

yj high defect coverage. For example, a defect can cause an unwanted short between 

J two signal lines. Such a bridging fault, can be modeled as an unwanted AND gate in 

y : 15 the circuit. This change in the circuit functionality may not be accurately modeled 
Hf using SSL faults. As a result, other fault models have been explored. See, for 

" example, P. Bannerjee, et al., "Characterization and Testing of Physical Failures in 

O MOS Logic Circuits," IEEE Design & Test of Computers, Vol. 1, No. 3, pp 76-86, 

fj] August 1984; R.D. Blanton, et al., "Properties of the Input Pattern Fault Model," In. 

20 Proc. of 1997 International Conference on Computer Design, pp 372-80, Oct. 1997; 
h* K.C.Y. Mei, "Bridging and Stuck-At Faults," IEEE Transactions of Computers, Vol. 

23, No. 7, pp 720-7, July 1974; G.L. Smith, "A Model for Delay Faults Based Upon 
Paths," In Proc. of 1985 International Test Conference, pp. 342-9, Nov. 1985; and 
R.L. Wadsack, "Fault Modeling and Logic Simulation of CMOS And MOS Integrated 
25 Circuits," Bell System Technical Journal, Vol. 57, No. 5, pp 1449-74, May- June 
1978. The disclosure of each of the above referenced publications is hereby 
incorporated by reference herein in its entirety. 

In addition, approaches like inductive fault analysis specify a realistic fault set 
by investigating the physical defects that lead to a failure. See, for example, F.J. 
30 Furguson, et al., "Extraction and Simulation of Realistic CMOS Faults Using 

Inductive Fault Analysis," In. Proc. of 1998, International Test Conference, pp. 475- 
84, Sept. 1998; and J. Khare, et al., "From Contamination to Defects, Faults and Yield 
Loss; Simulations and Applications," Klumer, Norwell, MA, 1996. The disclosure of 
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each of these publications is hereby incorporated by reference herein in its entirety. 
Stuck-at tests may be augmented by tests that target other fault types (bridging, delay, 
etc.) to improve defect coverage. This trend of augmenting stuck-at tests with other 
types of tests may continue due to on-going changes in technology. 
5 The fault-tuple fault modeling mechanism may allow many arbitrary mis- 

behaviors to be represented using expressions of primitives called fault tuples. A fault 
tuple is a 3 -element subfault including a signal line, a value, and a clock cycle 
constraint. AND-OR expressions of fault tuples, called macrofaults, can be used to 
represent various misbehaviors. The use of fault tuples allow both existing and 

10 emerging fault models to be represented using one common mechanism. Advantages 
of this common representation may among others, include (a) simultaneous analysis 
of different misbehaviors, (b) exploitation of common information among various 
misbehaviors, and/or (c) a single method for analyzing misbehaviors. 

Due to the different misbehaviors exhibited by various fault types, a separate 

1 5 test tool may be conventionally constructed for each fault model. By using the fault 
tuple mechanism for representing fault types, a single comprehensive tool can be used 
to simultaneously perform fault simulation and test generation for many types of 
faults as illustrated in Figure 1 . 

Figure 3(a) illustrates the Huffman model used to represent a circuit under 

20 test. Test patterns are applied to the primary inputs (Pis) on the rising edge of the 

clock cycle at t\, t% Circuit responses to the test patterns are observed at the end 

of a clock cycle at the primary outputs (POs) during the time windows r h r 2 ..., 
shown in Figure 3(b). 

As discussed above, a fault tuple is a three tuple f=<l,v,f> 9 where / is any 

25 signal line in the circuit under test, v = g/e e {0/0, 0/1, 1/1, 1/0}, and t is a constraint 
that describes the clock cycle(s) for which g <= v must be applied to /. (Using the 
well-known D algebra the values of v can be represented as: 0 = 0/0, 1=1/1, D=l/0, D 
=0/1 .) The fault tuple element / can take any of the following values {N, /, / + N, </, 
>/, > i, <i, >/+N, etc.} , where: 

30 N: Nth clock cycle after t h i.e., the fa clock cycle; 

i: Any clock cycle 

/+N: Nth clock cycle after a reference clock cycle t t i.e., t i+N ; 
>i: Any clock cycle tj after a reference clock cycle // (J > i); 
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<i: Any clock cycle tj before a reference clock cycle (j < i); 
> i: The clock cycle f, or any clock cycle tj after /, (f > i); 
< i: The clock cycle f, or any cycle tj before f, (j < i)\ and 
>i+N: Any clock cycle (, after the Nth clock cycle after a reference 
5 clock cycle /, (j > i+N). 

Other clock cycle constraints can be defined in a similar fashion. 

A fault tuple / =<l,v,t> is satisfied if g e v is applied to signal line / for the 
clock cycle range described by t due to the application of a sequence of test patterns 

10 T\ } T% ... T n from an unknown or reset state. Consider the circuit shown in Figure 4 
and the fault tuples f\ =<x\, 0, i> and^=</2, A />- Fault tuple f\ is satisfied if a test 
pattern sequence assigns the value 0 to signal line xi in any clock cycle (clock cycle 
constraint t=i). Since the example circuit is combinational, the single test pattern 
X 1X2X3X4 = 0111 applies the value 0 to x\. Thus, the fault tuple f\ is satisfied by 

15 xjX2X3X4=01 1 1 . The satisfaction of/2 requires that a 1 be applied to signal line h in 
any clock cycle. The test X 1X2X3X4 =0111 also causes the value 1 to be applied to 
signal line I2 and, therefore, also satisfies fault tuple fa The value D=l/0 in 
parenthesis on 1% in Figure 4, is the. discrepancy or error activated on the line. The 
observation requirements of the error are discussed below. 

20 A fault tuple / = </, v,/> is a reference tuple if no relational or arithmetic 

operators appear in the clock cycle constraint t. Two fault tuples fi=<li,Vj,ti> and 
fj^^pVjytp- are related if both f t and fj use the same clock cycle variable / to describe 
their clock cycle constraints. Two fault tuples fi=<h,v if ti> and fj =< lj>Vj>tj> are distinct 
if // ^ Ij or v,^t vj or /, ^ Distinct fault tuples ft and fj are represented as f *f The 

25 fault tuples f\ =<l h 1, />, fi=<l% lj> and f =</ 3 , Dj+ 1 > are distinct. Fault tuples /i 
and^2 are reference tuples since the clock cycle constraints for both these tuples 
contain no relational or arithmetic operators. The fault tuples^ and f are related 
because both use the same clock cycle variable j 9 while fj is not related to either^ or 
f because it uses the clock cycle variable /. 

30 A subproduct S=f\ fa. . .f n is a conjunction of fault tuples where all the fault 

tuples of S are related; at least one fault tuple fe S is a reference fault tuple or all the 
fault tuples of the subproduct have integer clock cycle constraints; and every pair of 
fault tuples ffeS are distinct, such that f\^fj for every ij pair where / ^ j. A 
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subproduct S = f\f 2 . . . f n is satisfied if all the fault tuples of the subproduct are 
satisfied and at least one error D or D (if any) is observed in any clock cycle in or 
after the clock cycle in which the error was activated due to the application of a 
sequence of test patterns T\,T 2 , . . . T„. Two subproducts S, =fn fa • • J\ m and Sj =fj\ 
5 .fj2 . . .fjn are distinct if | S/ | ^ | Sj | or f ip ^f jq ^ for any f ip e Si and f jq e Sj. Distinct 

subproducts Si and Sj are denoted as Si * Sj. 

Fault tuples represent conditions for a signal line's value and the clock cycle 
constraint when the value is applied on the signal line. Related fault tuples together 
represent the activation conditions for a single faulty circuit or faulty machine. 
10 Hence, each subproduct represents some or all the activation and observation 
conditions for a unique faulty machine. 
O Consider the distinct subproducts S\ =</i, 0, ixl^D, />, S 2 =<lb IJxl^DJ + 

5 l></ 3 ,/,>=y + 3> and S 3 =<l h 0J + l><l 2 ,D,i + />. Both the subproducts Si andS 2 

zJ have at least one reference tuple each (<l\ t 0,i> or <lzD } i> for Si and <l\,l,j> for S2) 

hi 15 and are formed of distinct and related fault tuples. Subproduct S3 is an illegal 

subproduct because it does not contain a reference tuple. 

Satisfaction of S\ requires the two faults tuples of S\ to be satisfied at the same 
Ln clock cycle Since fault tuple f\2=<l%D,i> of subproduct S\ has an error D, this 

;S error needs to be observed to satisfy S\. If the circuit under test is combinational, 

D 20 satisfaction of Si would require D to be observed in the output response observation 

time window r h If the circuit under test is sequential, satisfaction of S\ would require 
D to be observed in output response observation time window r,, such that j > i, 
since the error D could take more than one clock cycle to be observed. Hence, the test 
sequence length for the satisfaction of this subproduct could be one or more tests. 
25 Subproduct S2 contains fault tuples with clock cycle constraints with relational 

or arithmetic operators. Satisfaction of S 2 requires that all the fault tuples of S2 be 
satisfied. The^i=</i,/j > fault tuple has to be satisfied at any clock cycle /,. Fault 
tuples y22 = ^2, D,j+l> has to be satisfied in the subsequent clock cycle tj+\ as 
required by the fault tuple's clock cycle constraint. Fault tuple J £3=</3, /,>=/ + 3> 
30 has to be satisfied in the third clock cycle after tj, i.e., tj+3 or any clock cycle tk such 
that k>-j. Finally, for the satisfaction of S 2 the error D due to f 22 has to be observed 
in some output response observation window r s such that 5 > y + 1 . 
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A product P — S\ . S2 • . -S m is a conjunction of subproducts such that every 
pair of subproducts S h Sj e P 9 are distinct, that is, S t * Sj for every ij pair such that / 
* j\ A product P = S\ . S 2 . . .S m is satisfied if and only if each subproduct of 5, e P is 
satisfied by the same test sequence. A macrofault M = {P\ + P2 + . . - /V * s a 
5 disjunction of products. A macrofault M = {P\ + P2 + • • ■ is detected if and only 
if at least one P, e Mis satisfied. 

A product potentially represents the conditions for activation and observation 
of multiple faulty machines using the same test sequence T seq . Each subproduct of a 
product represents one of these multiple faulty machines. Since each subproduct can 
1 0 have fault tuples with various clock cycle constraints, the test sequence lengths for 
each subproduct satisfaction can be different. The longest test sequence among these 
^ various sequences should be capable of satisfying all the subproducts of the product. 

%p The sequence T seq refers to such a sequence. 

~ A macrofault represents alternative activation and observation conditions for 

15 one or more defects. Each product (which is not necessarily mutually exclusive from 
yi other products) of a macrofault is used to represent an alternative activation and 

' observation condition for one or more faulty misbehaviors caused by the 

□ corresponding defects. 

2j Consider the product P\ =<l h 0, i><h A i><h,l,j>h,D,j+\> formed of two 

^ 20 distinct subproducts S\=<hAi><hDJ> and S 2 =<h,lj><h,DJ+\>. Both these 

^ subproducts need to be satisfied by the same test sequence to satisfy P\. Consider the 

macrofaults A/i=^</i,A/>+</2,ft/>^, M2={<l\,0,i>+<hD,i+\>} and 
M3={<l\,D,i><l2,D,i + l>}. Macrofault M\ is legal and is formed of two products 
P\=<l\,D,i> and P2 =< lzOJ> f each containing a single subproduct. The products P\ 
25 and P2 represent alternative activation and observation conditions for the detection of 
the defect represented by M\. Although macrofault M\ contains two different 
products, the use of the same clock cycle variable i in the fault tuples of both the 
products means that the products together represent one single faulty machine. 
Macrofault M2 is formed of two products P\=<l\,0J> and P2 =< hD y i+\>, each 
30 containing a single subproduct. This macrofault is illegal, even though the fault 

tuples of the two products are related, because the product P 2 contains no reference 
tuple. 




Macrofault M3 is a legal macrofault but probably does not exactly convey 
what the user intended. Detection of M3 requires that fault tuples fa=<l\,D,i> and 
fa=<h>D y i + 1 > be satisfied in adjacent clock cycles, and an error be observed. The 
use of the fault tuple fa is most likely a user-provided insight for error propagation of 
5 the Doffa in subsequent clock cycles if observation of the error does not happen in 
the clock cycle in which fa is satisfied. Consider the case where the fault tuple/31 is 
satisfied and its error D is observed in the same clock cycle in which satisfaction 
occurs. In this case the satisfaction of fa for the detection of macrofault A/3 is 
unnecessary and not required. But the definition of M3 requires the satisfaction of fa 
10 (note however that the observation of the error of fa is not required). Hence, a better 
representation of the user's intention is most likely 

M-$={<l\,D,i>+<l\,D,i><l2,D,i+\>}. For this macrofault, if the single product 
0} containing the single fault tuple <l\, D, i> is satisfied and its error observed, there will 

^ be no need to consider the second product. 

pj 15 A fault tuple is a fault modeling mechanism that allows for the representation 

Lfi of a significant number of fault types. Consider an SSL fault /= a/l (i.e. signal line a 

is permanently stuck-at 1). This can be represented using the tuple format as: {<a, 

D, />}, which indicates that fault fis detected if in any clock cycle /, a value 0 is 

|j£ applied to line a and the error discrepancy D due to fis propagated to an observable 

□ 20 point. These are the conditions for detecting the SSL fault f Other fault types can 

~~ also be represented. 

Figures 2a, 2b and 2c illustrate how the tuple mechanism can be used to 
represent a multiple stuck-line (MSL) fault (A/1, C/0), an AND-bridging fault 
between lines B and C, and an OR gate pattern fault, respectively. The MSL and 
25 AND-bridging faults can be detected in multiple ways as indicated by the disjunction 
of the tuple product expressions. 

For example, the MSL fault M = {A/1, C/0} is detected if and only if the faulty 
circuits with both SSL faults A/1 and C/0 are detected, or A=l and C/0 are detected, 
or A/1 is detected and C=0. The conditions for the detection of Mean be represented 
30 using tuple expressions in Figure 2a. The AND bridging fault F = ANDBF(B,C) is 
detected if and only if the SSL fault B/0 is detected AND C=0 OR the SSL fault C/0 
is detected AND 5=0. See Abromovici et al., "Digital Systems Testing And Testable 
Design," Piscataway, NJ, IEEE Press, 1990 the disclosure of which is here by 




incorporated by reference herein in its entirety. The condition for the detection of F 
can be represented using tuple expressions in Figure 2b. The pattern fault P = 00 
-+(0, 1) of the OR gate is detected if E = 0 AND C=0 (activation conditions for P) 
AND the discrepancy D caused at the output of the OR gate is propagated to an 
5 observable point. The tuple expression for the conditions of P 's detection is shown in 
Figure 2c. The use of the same clock cycle variable t = i for the MSL and bridging 
faults indicates that the tuples are not independent, that is, all the tuples of a product 
have to be satisfied in the same clock cycle /. 

Transistor stuck-open (TSO) faults can also be represented using the tuple 

10 representation mechanism as shown in Figure 2d where the N-transistor of gate Gl 
connected to line B is stuck-open. The macrofault representation of a TSO fault is 
based on the 2 -test sequence required for detecting a TSO fault for CMOS circuits. 
This macrofault is also an example of a macrofault utilizing a relational value for 
For the example shown, the pull-down transistor to which input B is connected is 

1 5 considered to be stuck-open. To detect this fault, the output of the NAND gate (line 
E) can be initialized to a logic value ' 1 ' using the first test pattern. The second test 
pattern is then used to activate the faulty transistor and propagate the error 

discrepancy D to an observable point. This sequence of two test patterns is captured 
by the time element values / and / + 1 . Tuple(s) with t = i describe the initialization 

20 condition for the fault. The tuples with t = / + 1 describe conditions for the activation 
and propagation of the error discrepancy D to an observable point exactly 1 clock 
cycle after the conditions have been initialized in clock cycle /. Similarly, conditions 
for TSO fault detection can be described for the other faulty transistors of the NAND 
gate and for other gate types also. 

25 Timing or dynamic faults can also be captured by the tuple mechanism. 

Figures 2e and 2f illustrate a slow to rise NAND gate transition fault E and slow-to- 
fall robust path delay fault AEF, respectively. These macrofaults use relational 
values, like the TSO fault of Figure 2d, for the tuple element t. The slow-to-rise 
NAND gate transition fault (Figure 2e) is detected if the transition is initialized (E = 

30 0) by first test vector and the slow transition represented by the error discrepancy D 
appearing on line E is propagated to an observable point by the second test vector. 
This sequence of test vectors is captured by the time values / and / + 1 . Path delay 
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faults can also be described using the same mechanism with additional conditions for 
values on the side inputs along the path under test. 

From the expressions for the macrofaults, it can be observed that tuple sharing 
exists among various fault types. In other words, many fault types can be described 
5 using common fault tuples. For example the tuple <C, D 9 i> is present in the 

expression for the MSL and the AND-BF macrofaults of Figures 2a and 2b. Tuple 
sharing can be exploited by tracking the corresponding macrofaults when tuples are 
analyzed (simulated). 

High defect coverage relies on good coverage of different fault types. 
10 Comprehensive test generation techniques according to the present invention can be 
used to generate tests for many arbitrary misbehaviors that can occur in digital 
_ systems, thus providing a single test generation solution. The techniques according to 

the present invention are based on the fault tuple modeling mechanism which can be 

zz used to represent many misbehaviors in terms of 3-element primitives. 

y = 

CP 15 Experimental results show the viability of the methodology for generating 

[5 tests for various fault types. It is also shown that common information among various 

fault types can be exploited to reduce the total test generation time, test set size, and 
□ the number of aborted faults. Results generated from benchmark circuits can produce 

= Ft 
li - 

i I a reduction in CPU run times for test generation by an average of 32% when 

Ul 20 compared to the sum of CPU run times for each individual fault type. A significant 

y= reduction in the test set sizes and number of aborted faults can also be achieved. 

Simultaneous analysis for various fault types can result in an average test set 
compaction of 60% and a 34% reduction in a number of aborted faults. 

As will be appreciated by one of skill in the art, the present invention may be 
25 embodied as a method, data processing system, or computer program product. 
Accordingly, the present invention may take the form of an entirely hardware 
embodiment, an entirely software embodiment or an embodiment combining software 
and hardware aspects all generally referred to herein as a "circuit" or "module." 
Furthermore, the present invention may take the form of a computer program product 
30 on a computer-usable storage medium having computer-usable program code 

embodied in the medium. Any suitable computer readable medium may be utilized 
including hard disks, CD-ROMs, optical storage devices, a transmission media such 
as those supporting the Internet or an intranet, or magnetic storage devices. 
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Computer program code for carrying out operations of the present invention 
may be written in an object oriented programming language such as Java®, Smalltalk 
or C++. However, the computer program code for carrying out operations of the 
present invention may also be written in conventional procedural programming 
5 languages, such as the "C" programming language. The program code may execute 
entirely on the user's computer, partly on the user's computer, as a stand-alone 
software package, partly on the user's computer and partly on a remote computer or 
entirely on the remote computer. In the latter scenario, the remote computer may be 
connected to the user's computer through a local area network (LAN) or a wide area 

10 network (WAN), or the connection may be made to an external computer (for 
example, through the Internet using an Internet Service Provider). 

The present invention is described below with reference to flowchart 
illustrations and/or block diagrams of methods, apparatus (systems) and computer 
program products according to embodiments of the invention. It will be understood 

1 5 that each block of the flowchart illustrations and/or block diagrams, and combinations 
of blocks in the flowchart illustrations and/or block diagrams, can be implemented by 
computer program instructions. These computer program instructions may be 
provided to a processor of a general purpose computer, special purpose instructions 
may be provided to a processor of a general purpose computer, special purpose 

20 computer, or other programmable data processing apparatus to produce a machine, 
such that the instructions, which execute via the processor of the computer or other 
programmable data processing apparatus, create means for implementing the 
functions/acts specified in the flowchart and/or block diagram block or blocks. 
These computer program instructions may also be stored in a computer- 

25 readable memory that can direct a computer or other programmable data processing 
apparatus to function in a particular manner, such that the instructions stored in the 
computer-readable memory produce an article of manufacture including instruction 
means which implement the function/art specified in the flow chart and/or block 
diagram block or blocks. 

30 The computer program instructions may also be loaded onto a computer or 

other programmable data processing apparatus to cause a series of operational steps to 
be performed on the computer or other programmable apparatus to produce a 
computer implemented process such that the instructions which execute on the 
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computer or other programmable apparatus provide steps for implementing the 
functions/acts specified in the flowchart and/or block diagram block or blocks. 

Figure 5 illustrates operations of test generation and simulation according to 
embodiments of the present invention wherein test sequences for an electronic device 
5 can be generated and/or simulated. When providing test generation and/or simulation, 
possible faults of interest for the electronic device are selected and modeled as 
macrofaults comprising one or more fault tuples arranged in one or more products as 
discussed above in greater detail. The faults of interest may be selected to cover all 
possible faults or, more likely, subsets of possible faults deemed, for example, most 
10 likely to occur and/or most important to test. 

As shown at block 201, the macrofaults can be provided as a macrofault list. 
A macrofault is chosen from the macrofault list at block 203, and the test generator 
attempts to generate a test sequence comprising one or more test patterns that can 
detect the fault represented by the macrofault. If a test sequence cannot be generated 
15 for the macrofault at block 205, another macrofault is chosen from the macrofault list 
for test generation at block 203. If a test sequence can be generated for the macrofault 
at block 205, test simulation can be performed for the test sequence at block 207. 
Test sequence generation is discussed in greater detail below with respect to Figure 6. 

Once a test sequence is generated for a particular macrofault, the test sequence 
20 can be simulated at sub-block 207a to determine if the test sequence can also be used 
to detect faults represented by other macrofaults in the macrofault list. If the test 
sequence can be used to detect faults represented by other macrofaults in the 
macrofault list, these macrofaults can be dropped from the macrofault list at block 
207b. Accordingly, the number of separate steps of test sequence generation can be 
25 reduced. Moreover, the length of the test (including all test sequences used to detect 
the faults represented by the macrofaults in the list) can be reduced, by dropping 
macrofaults from the list that can be detected using previously generated test 
sequences. Test generation and simulation can be complete at block 209 once all 
macrofaults from the list have either been subjected to test generation or dropped. 
^30 Otherwise, the next macrofault from the list can be selected at block 203. 

Operations for embodiments of test generation according to the present 
invention are illustrated in the flow chart of Figure 6. As shown, a macrofault M can 
be provided at block 301. The macrofault M comprises at least one fault tuple 
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arranged in one or more products such that each product of fault tuples represents an 
alternate way of detecting a possible fault of the electronic device. A macrofault with 
two products P, for example, can be detected by satisfying either or both of the 
products wherein a product is satisfied by detecting all of the fault tuples thereof and 
5 the propagation of one of any resulting errors. 

A product P of macrofault M is chosen at block 303 and test sequence 
generation is attempted for the product P. If a test sequence can be generated that 
satisfies the product P at block 305, the macrofault M is deemed detected at block 
307, and the test sequence is provided for subsequent simulation and/or device testing. 
10 If a test sequence cannot be generated that satisfies the product P at block 305, the 
macrofault is checked at block 309 to determine if there is another product P in the 
macrofault M. If there are no more products P in the macrofault M, the macrofault is 
^ considered redundant at block 311 meaning that a test sequence cannot be generated 

*if to detect any of the products of the macrofault M. If there are more products P in the 

01 15 macrofault M, another product P is chosen from the macrofault M at block 303, and 

5 3 jf 

test sequence generation is attempted for the new product. 
^ In other words, a test generator according to embodiments of the present 

□ invention attempts to generate a test sequence for each product of the macrofault until 

S"| either a test sequence is generated that satisfies one or more of the products, or none 

Lq 20 of the products can be satisfied. If none of the products can be satisfied, the 
fl macrofault is considered redundant meaning that the test generator is unable to 

generate a test sequence that satisfies the macrofault. 

Figure 7 illustrates operations of test simulation according to the present 
invention. Once a test sequence has been generated for a macrofault, this test 
25 sequence can be simulated for other macrofaults. When doing combined operations 
of test generation and simulation, simulation can be used to determine if other 
macrofaults can be detected using a test sequence generated for a first macrofault. 
Simulation, for example, can be performed for all macrofaults remaining in the 
macrofault list 201 of Figure 5. As discussed above, the macrofaults remaining in the 
30 macrofault list 201 are the macrofaults which have not been subjected to test 
generation or have not been dropped during previous simulation operations. 

As shown in Figure 7, the reference tuples of the macrofaults for simulation 
are added for simulation at block 401. In other words, the test sequence is simulated 
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for all of the reference tuples of all of the macrofaults. If any of the reference tuples 
cannot be satisfied by the test sequence being simulated, the corresponding 
macrofaults are not subjected to further simulation. Macrofaults whose reference 
tuples can be satisfied by the test sequence being simulated can be added for update at 
5 block 403. By terminating simulation for macrofaults whose reference tuples are not 
satisfied by the test sequence being simulated, simulation times can be reduced. 

Beginning at block 405, each of the test patterns (Ti=l to N) is simulated until 
either all of the macrofaults are detected at block 411 or all of the test patterns have 
been simulated at block 415. For each test pattern, the fault tuples of the macrofaults 

1 0 added at block 403 are simulated at block 407, and non-reference tuples are added for 
fault simulation at block 409. If all macrofaults added for update at block 403 can be 
detected using the test patterns simulated so far, simulation can end at block 411, or 
simulation can end when all of the test patterns have been simulated at block 415. 
Alternately, simulation can proceed with the next test pattern at block 405. At the end 

15 of simulation, there will be provided a listing of macrofaults satisfied by the test 

sequence being simulated (if any of the macrofaults are satisfied by the test sequence 
being simulated). 

When simulation is integrated with test generation as shown in Figure 10, the 
macrofaults satisfied by the test sequence being simulated can be dropped at block 
20 207b from the macrofault list of block 201. Accordingly, a number of test sequences 
generated can be reduced because separate test sequences do not need to be generated 
for the macrofaults dropped because they were satisfied by previously generated test 
sequences. 

While test generation and simulation are discussed with regard to Figure 5 as 
25 being combined, test generation according to Figure 6 and test simulation according 
to Figure 7 can be performed separately. For example, embodiments of test 
generation according to the present invention can be performed for one or more 
macrofaults without test simulation. Alternately, embodiments of test simulation 
according to the present invention can be performed for test sequences generated 
30 according to any means know to those having skill in the art. 

In the drawings and specification, there have been disclosed typical preferred 
embodiments of the invention and, although specific terms are employed, they are 
used in a generic and descriptive sense only and not for purposes of limitation, the 
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scope of the invention being set forth in the following claims. The use of fault tuples 
is also discussed by K.N. Dwarakanath and R.D. Blanton in "Universal Fault 
Simulation Using Fault Tuples" (Proceedings of the 37 th Design Automation 
Conference, pp. 786-789, June 2000); and by R. Desineni, K.N. Dwarakanath, and 
5 R.D. Blanton in "Universal Test Generation Using Fault Tuples" (ITC International 
Test Conference, pp. 812-819, October 2000). The inventor of the present invention 
is an author of each of these publications which were published less than one year 
prior to the filing of the present application. The disclosures of these publications are 
hereby incorporated by reference herein in their entirety. 
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